messenger spam problem

  • Thread starter Thread starter tommy
  • Start date Start date
T

tommy

FYI
[not a virus]
I scanned for a popup box that looked like smitfraud with several avs before
googling to find out that it doesn't show up as a virus. I fixed it with a
firewall [ spf ] Now I can run without disabling messenger service

-
tommy
 
David H. Lipman said:
From: "tommy" <[email protected]>


| FYI
| [not a virus]
| I scanned for a popup box that looked like smitfraud with several avs before
| googling to find out that it doesn't show up as a virus. I fixed it with a
| firewall [ spf ] Now I can run without disabling messenger service

| -
| tommy


Yes the Messenger Service generates/receives NetBIOS over IP Pop-Ups and is blocked by a
FireWall or by a NAT Router.

What is the version of your Oerating System ?
Click to expand...
W2KSP3
I had to disable the messenger service again. Thought the firewall had
blocked it.
 
David H. Lipman said:
| W2KSP3
| I had to disable the messenger service again. Thought the firewall had
| blocked it.
| --
| tommy


WinXP SP2 automatically disabled the Messenger Service upon installation. I don't know
why/how the NT Service was re-nabled and started.

If you are connected to the Internet through broadband such as Cable or DSL I suggest a
Cable/DSL Router such as a Linksys BEFSr41. The Network Address Tranlation (NAT)
capabilities of the Router will block NetBIOS Pop-Ups even if you enable the Messenger
Service.
Click to expand...
Thanks for the tip
BTW I'm currently using a dialup connection
I have the ports to block listed on a page somewhere
Messenger Service still may be of use on small p2p network?
 
However if you can get Messenger Service spam then that means that NetBIOS over IP and
other network protocols such as TCP pots 135 and 445 are exposed and leave you at risk.
Click to expand...

Just to add to what David has said, for xp/2k, a useful starting tool is
http://seconfig.sytes.net/?cat=4

You just tell it what type of network setup you have (standalone, etc), and
it selects pretty good default settings. The documentation page has a good
some good info.

Regards, Dave Hodgins
 
Back
Top